Minor Changes
-
BREAKING CHANGE: Custom
encodeanddecodefunctions now own the cookie value representation directly. Previously, customencodeoutput was still wrapped in Remix's default base64 encoding and customdecodereceived a value after that base64 wrapper was removed. Now customencodeoutput is signed and serialized as-is, and customdecodereceives the unsigned raw cookie value. The default encoder and decoder still use the existing base64-safe representation when no custom functions are provided. -
BREAKING CHANGE:
Cookie.httpOnlynow returnsboolean | undefinedinstead of defaulting tofalse. This lets consumers distinguish an omittedhttpOnlyoption from an explicithttpOnly: falsesetting.